Vulnerability Threat Management Triage Analyst

Investigate the use and exposure of vulnerable technologies across the firm by self-serving technology data through database queries and by investigating individually with engineering teams and product owners. Perform daily, in-depth analysis of critical vulnerabilities from various intelligence sources to determine their risk, potential impact, and relevance to Citi's technology landscape.

Role: Vulnerability Threat Management Triage Analyst
Duration: 12 Months
Location: 3+ Days onsite either Irving, TX (DFW) or Tampa, FL

Role Overview
The Vulnerability Threat Management Triage Analyst is a critical cybersecurity role responsible for the rapid analysis and triage of incoming vulnerabilities. This position serves as a subject matter expert, leading efforts to assess threats for risk, potential impact, and exploit status within the Citi environment. The ideal candidate is a cybersecurity SME who can think fast, act quickly, and work proactively to prevent, monitor, and respond to potential cyber-attacks.

Key Responsibilities
Perform daily, in-depth analysis of critical vulnerabilities from various intelligence sources to determine their risk, potential impact, and relevance to Citi's technology landscape.
Investigate the use and exposure of vulnerable technologies across the firm by self-serving technology data through database queries and by investigating individually with engineering teams and product owners.
Assess the exploit status of vulnerabilities, leveraging threat intelligence and security research to prioritize remediation efforts effectively.
Coordinate the analysis and delivery of actionable Information Security Vulnerability Findings to internal stakeholders, providing clear, interpretative analysis.
Ideal Candidate Profile

Essential Qualifications:
Experience: 5+ years of work experience in Information Security, specifically with a strong background in vulnerability management and threat analysis.
Education: Bachelor's degree in Computer Science, Information Security, or a related field, or equivalent experience.
Vulnerability Analysis: Deep understanding of Information Security and Vulnerability Management processes, patch development, and application/system architecture.
Data & Scripting: Strong proficiency with SQL for database querying and data analysis.
Communication: Fluent in English with a proven ability to articulate complex technical findings and translate them for both technical and business stakeholders.
Analytical Mindset: Proven analytical and problem-solving skills, with the ability to perform research, assessment, and analysis under pressure.

Preferred Qualifications:
Programming/Scripting: Knowledge of a programming and/or scripting language, with a strong preference for Python.
Scanning Tools: Experience with or knowledge of industry-standard scanning tools (e.g., Qualys, Snyk).
Statistics: Good knowledge of descriptive statistics for metrics and reporting.
Office Suite: Proficiency with the Microsoft Office Suite.
Additional Skills:
Excellent problem-solving abilities.
Adaptable and open to change in a fast-paced environment.
Eager to learn and continuously develop skills.
Ability to "think out of the box" to find solutions.
Strong team player with excellent collaboration skills.